Re: Download links for sha256/sha512 checksums

2018-04-07 Thread Hervé BOUTEMY
to me, going to sha1 only *for fingerprints* is the right move currently going to sha256 would make people think that a strong fingerprint means a stronger security: this is wrong If you want security, check signatures (ie. .asc files, with corresponding public keys) that are real security (done

Re: Download links for sha256/sha512 checksums

2018-04-06 Thread Michael Osipov
Am 2018-04-06 um 22:38 schrieb Karl Heinz Marbaise: Hi, On 06/04/18 22:28, Michael Osipov wrote: Am 2018-04-06 um 22:13 schrieb Karl Heinz Marbaise: Hi, On 06/04/18 21:54, Michael Osipov wrote: Am 2018-04-06 um 21:50 schrieb Karl Heinz Marbaise: Hi to all, updated the download page having

Re: Download links for sha256/sha512 checksums

2018-04-06 Thread Karl Heinz Marbaise
Hi, On 06/04/18 22:28, Michael Osipov wrote: Am 2018-04-06 um 22:13 schrieb Karl Heinz Marbaise: Hi, On 06/04/18 21:54, Michael Osipov wrote: Am 2018-04-06 um 21:50 schrieb Karl Heinz Marbaise: Hi to all, updated the download page having now sha256/sha512 links... first step of the efforts

Re: Download links for sha256/sha512 checksums

2018-04-06 Thread Michael Osipov
Am 2018-04-06 um 22:13 schrieb Karl Heinz Marbaise: Hi, On 06/04/18 21:54, Michael Osipov wrote: Am 2018-04-06 um 21:50 schrieb Karl Heinz Marbaise: Hi to all, updated the download page having now sha256/sha512 links... first step of the efforts to migrate away from .md5 to sha256/sha512..

Re: Download links for sha256/sha512 checksums

2018-04-06 Thread Karl Heinz Marbaise
Hi, On 06/04/18 21:54, Michael Osipov wrote: Am 2018-04-06 um 21:50 schrieb Karl Heinz Marbaise: Hi to all, updated the download page having now sha256/sha512 links... first step of the efforts to migrate away from .md5 to sha256/sha512.. Most important: https://maven.apache.org/download.cg

Re: Download links for sha256/sha512 checksums

2018-04-06 Thread Michael Osipov
Am 2018-04-06 um 21:50 schrieb Karl Heinz Marbaise: Hi to all, updated the download page having now sha256/sha512 links... first step of the efforts to migrate away from .md5 to sha256/sha512.. Most important: https://maven.apache.org/download.cgi WDYT ? other changes/improvements ? I wou